Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: edE3xXGdTLbNrY6WVNaPOeg3wjivp9PWHDBx+6hdSQM=
Subject key identifier: 2F:F2:FE:24:6A:44:2F:3D:F7:EE:F7:35:03:90:25:AE:0E:10:9C:E1
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 0198D5BC5AB7C61EC97282334F2DC8AA14C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0F24
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: p91QP34vsN69X5VUbp+lRsCvan0R7F217Br4VoP238Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5a:b7:c6:1e:c9:72:82:33:4f:2d:c8:aa:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=2ff2fe246a442f3df7eef735039025ae0e109ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:c7:99:09:d4:04:8f:08:f0:e6:c0:28:59:
e4:a9:30:17:0d:c0:f4:3c:27:22:58:fe:60:50:2f:
bb:ed:d2:32:79:39:7c:ec:a6:73:ae:25:a2:01:bc:
c6:e7:61:24:11:46:bb:e9:c6:09:f4:3f:c0:fc:3c:
6e:8f:f3:ff:74:c6:dd:f1:04:26:0a:01:88:79:f5:
ce:b3:df:25:f4:1b:08:7b:ea:aa:27:28:a7:06:6f:
c0:f3:7f:13:82:11:62:38:80:2e:5d:8c:29:56:62:
51:55:17:85:da:42:25:6b:bf:87:23:e1:9c:c1:dd:
a5:1a:85:23:1c:56:6c:e8:39:eb:55:8b:44:87:cb:
a9:73:41:df:05:46:d5:17:2d:dd:f3:56:17:17:2b:
fe:ae:46:b3:5f:91:35:14:2a:8d:5e:cb:0e:41:cf:
04:72:f6:88:c2:a3:29:98:76:ed:13:60:e4:0b:f4:
e5:61:8f:b1:96:a8:21:83:69:f9:24:eb:b4:f9:97:
59:3e:fb:71:c5:89:d7:a6:54:91:87:8b:48:2f:e9:
f3:ea:18:92:05:2c:4b:85:6b:cf:f7:82:a5:14:9d:
d7:58:62:4f:6c:ee:8f:d1:76:38:ec:5f:ed:75:02:
e5:1e:21:76:54:a6:84:6a:c2:9b:b6:07:f8:ac:19:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:FE:24:6A:44:2F:3D:F7:EE:F7:35:03:90:25:AE:0E:10:9C:E1
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:29:df:d7:29:19:26:b5:cc:22:74:b4:a8:bb:9e:56:5d:4a:
b6:ea:b0:91:28:cb:1a:5d:1e:c5:16:ad:6f:e2:c3:0c:39:45:
b5:99:42:88:2d:de:5a:5f:56:e5:4d:19:ec:e2:05:ea:8d:94:
d2:ff:63:6f:94:1f:4b:ce:6a:00:83:9d:b3:83:8a:08:25:d2:
fd:6a:25:9a:1a:7c:b8:75:69:09:e0:be:bf:00:b0:eb:6d:1b:
30:fc:45:3c:cc:86:b5:58:79:75:74:fd:2e:87:88:61:6c:5c:
90:05:5b:8e:8a:a8:8b:b6:05:2f:63:c9:1c:dc:19:ba:30:68:
b4:9e:91:4a:5b:46:a7:90:24:ac:91:e6:a8:1f:90:cc:41:3e:
8f:3a:a6:17:9d:97:bd:f6:43:0b:89:ba:46:59:07:34:94:09:
dc:03:a3:42:9e:db:57:23:4f:48:c2:fc:68:d8:86:c5:2f:a0:
48:ad:d3:a5:40:0e:8a:33:7d:cf:17:98:8c:73:64:f9:74:2e:
c8:9e:98:5e:22:b1:66:73:eb:fa:db:dc:0a:73:18:07:58:59:
89:dc:0a:f5:67:71:78:a4:0b:4a:80:68:d7:f6:e0:0f:d6:f5:
e3:9f:e7:f8:53:5f:fd:26:93:f2:82:b6:33:e1:b4:56:56:a3:
9e:9f:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:31 2025 by rpki-client